Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File:                     GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier:          pjSw71ypXiTzdFiOzUZIA3SoPRD+xCwAT3x4tBXOvkY=
Subject key identifier:   A9:63:0F:9D:0C:53:6E:F5:95:3C:3C:44:E1:C6:64:E4:48:13:B6:B7
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer:       /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial:       80
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number:          79
Signing time:             Mon 27 Jul 2026 10:05:15 +0000
Manifest this update:     Mon 27 Jul 2026 10:05:15 +0000
Manifest next update:     Mon 03 Aug 2026 10:05:15 +0000
Files and hashes:         1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: Us9LAw7xg0rEzPbwTFFN1CjQWvQemD/6riDcN/bt/2g=)
                          2: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=)
                          3: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 10:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
        Validity
            Not Before: Jul 27 10:05:15 2026 GMT
            Not After : Aug  3 10:05:15 2026 GMT
        Subject: CN=6a672d5b-69a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:06:ad:ea:56:d7:6d:81:bb:b9:e6:09:78:
                    c9:28:13:3b:a1:69:67:07:9a:79:14:14:84:49:64:
                    dd:f0:71:b7:16:f5:2a:ee:96:4c:ca:af:17:2f:73:
                    3f:dc:dc:7a:bc:59:8a:e4:54:06:59:b0:8a:93:4a:
                    9b:c1:ec:20:4e:f6:f6:24:7c:24:73:c2:af:5c:eb:
                    fa:b3:6a:28:18:66:f1:5f:cb:cb:ad:3a:7c:de:ef:
                    97:ba:5d:be:41:15:7e:4f:7a:cb:c8:c1:92:88:f1:
                    06:2f:26:fd:5a:d7:86:c6:3f:a9:7e:67:3f:17:2f:
                    fd:82:26:5b:5b:a5:23:44:61:c3:54:b9:6b:93:38:
                    31:17:35:f0:d5:78:2e:1f:f2:a0:cb:a2:df:37:c7:
                    35:44:92:55:bc:f4:c7:ac:b4:b1:c8:bd:93:be:51:
                    ef:b1:e5:f8:1d:fa:e4:17:0a:99:43:a6:d8:80:de:
                    98:1a:d3:e8:d9:9b:95:ab:17:fb:1c:ee:aa:db:1d:
                    de:60:45:ae:9c:8a:63:b9:3f:fc:6b:eb:8b:62:0c:
                    60:7a:a6:c8:9f:89:10:e8:71:73:c0:dd:8a:0a:fe:
                    b9:70:e2:b1:84:df:49:8b:0d:60:22:3f:0e:e5:cd:
                    63:2b:2b:9c:04:46:2b:d6:5d:e1:f6:a8:c6:92:be:
                    80:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:0F:9D:0C:53:6E:F5:95:3C:3C:44:E1:C6:64:E4:48:13:B6:B7
            X509v3 Authority Key Identifier:
                keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c7:eb:87:20:a1:35:27:2d:3e:fc:4d:3f:d5:40:80:8b:60:
         07:73:29:1c:4b:d4:c1:b8:c6:0f:29:51:cb:20:2e:e1:eb:fa:
         7f:9d:79:6d:32:5a:de:ef:ac:5a:74:ef:52:09:3c:96:d1:4d:
         42:b0:0e:d6:71:a3:fb:d8:b1:d7:89:74:b4:b7:94:0b:6f:07:
         47:42:76:09:83:f0:ec:5c:c1:e3:bf:27:f7:35:f6:7b:e0:f7:
         8a:fd:63:27:de:21:df:f9:1c:26:8d:ac:3f:0e:4a:8e:cd:2a:
         5b:ef:a7:e9:53:d9:9b:48:70:87:c9:f4:9f:81:64:83:56:fe:
         d6:0c:83:7a:4c:97:81:43:f0:ae:86:f9:3b:53:0b:fb:1b:b9:
         0f:7b:7b:3c:22:cf:06:ad:3d:82:73:4d:dd:17:88:8e:34:2d:
         c6:4a:f3:f7:00:34:a9:9e:90:ca:65:07:9c:04:98:b0:b0:68:
         07:01:3e:66:8d:6c:c8:32:d6:b3:04:50:2d:06:e1:ee:d3:8a:
         fd:cf:0e:a7:41:7e:51:69:35:20:38:6a:b7:2f:3b:7e:20:cf:
         d1:13:f6:6c:fb:f0:a3:c0:67:78:51:ce:43:dc:ab:7a:87:87:
         b4:03:3f:8e:5d:e2:bc:82:02:6c:e6:d5:72:46:8c:19:ee:e5:
         39:2f:5a:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE5Q0MxMTAvBgNVBAUTKDFCMzY4MzUyNTk0NDc3NDM4ODg1MzA5MEQxMDA1QkI1
MTU1MjI0NkQwHhcNMjYwNzI3MTAwNTE1WhcNMjYwODAzMTAwNTE1WjAYMRYwFAYD
VQQDEw02YTY3MmQ1Yi02OWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2eEGrepW122Bu7nmCXjJKBM7oWlnB5p5FBSESWTd8HG3FvUq7pZMyq8XL3M/
3Nx6vFmK5FQGWbCKk0qbwewgTvb2JHwkc8KvXOv6s2ooGGbxX8vLrTp83u+Xul2+
QRV+T3rLyMGSiPEGLyb9WteGxj+pfmc/Fy/9giZbW6UjRGHDVLlrkzgxFzXw1Xgu
H/Kgy6LfN8c1RJJVvPTHrLSxyL2TvlHvseX4HfrkFwqZQ6bYgN6YGtPo2ZuVqxf7
HO6q2x3eYEWunIpjuT/8a+uLYgxgeqbIn4kQ6HFzwN2KCv65cOKxhN9Jiw1gIj8O
5c1jKyucBEYr1l3h9qjGkr6AcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKljD50M
U271lTw8ROHGZORIE7a3MB8GA1UdIwQYMBaAFBs2g1JZRHdDiIUwkNEAW7UVUiRt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTlDQy85OTE0QjhFNERB
MUYxMUYwQUI4MjBGRjc4NEQzNjQxRC9HemFEVWxsRWQwT0loVENRMFFCYnRSVlNK
RzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0d6YURVbGxFZDBPSWhUQ1EwUUJidFJWU0pHMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTlDQy85OTE0QjhFNERBMUYxMUYwQUI4MjBGRjc4NEQzNjQxRC9HemFEVWxsRWQw
T0loVENRMFFCYnRSVlNKRzAubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAisfrhyChNSctPvxNP9VAgItgB3MpHEvUwbjGDylRyyAu4ev6f515bTJa3u+s
WnTvUgk8ltFNQrAO1nGj+9ix14l0tLeUC28HR0J2CYPw7FzB478n9zX2e+D3iv1j
J94h3/kcJo2sPw5Kjs0qW++n6VPZm0hwh8n0n4Fkg1b+1gyDekyXgUPwrob5O1ML
+xu5D3t7PCLPBq09gnNN3ReIjjQtxkrz9wA0qZ6QymUHnASYsLBoBwE+Zo1syDLW
swRQLQbh7tOK/c8Op0F+UWk1IDhqty87fiDP0RP2bPvwo8BneFHOQ9yreoeHtAM/
jl3ivIICbObVckaMGe7lOS9ahw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:12 2026 by rpki-client